diff --git a/typo3/sysext/backend/Classes/Preview/StandardContentPreviewRenderer.php b/typo3/sysext/backend/Classes/Preview/StandardContentPreviewRenderer.php index 51aea3e00db0..016c91207e4f 100644 --- a/typo3/sysext/backend/Classes/Preview/StandardContentPreviewRenderer.php +++ b/typo3/sysext/backend/Classes/Preview/StandardContentPreviewRenderer.php @@ -233,7 +233,7 @@ public function renderPageModulePreviewFooter(GridColumnItem $item): string $this->getProcessedValue($item, 'starttime,endtime,fe_group,space_before_class,space_after_class', $info); if (!empty($GLOBALS['TCA']['tt_content']['ctrl']['descriptionColumn']) && !empty($record[$GLOBALS['TCA']['tt_content']['ctrl']['descriptionColumn']])) { - $info[] = $record[$GLOBALS['TCA']['tt_content']['ctrl']['descriptionColumn']]; + $info[] = htmlspecialchars($record[$GLOBALS['TCA']['tt_content']['ctrl']['descriptionColumn']]); } // Call drawFooter hooks